0

Is there a method that allows an app running at a lower privilege to use SetWindowPos() to change the HWND_TOPMOST flag for a Window running at a higher privilege?

I recall, in the back of my mind, different API's available to allow things like that but I don't recall the specifics.

TIA!!

user3161924
  • 1,849
  • 18
  • 33
  • 2
    This seems like it would be a security hole. A low privilege app could remove topmost from a high privilege password prompt and then display its own fake password prompt. – Raymond Chen Aug 21 '20 at 21:47
  • Couldn't it already do that since it could set topmost on itself to overlay and the latest topmost is topmost or does the topmost logic use privilege level too? – user3161924 Aug 22 '20 at 14:59
  • Depends on how low privilege the low privilege app is. – Raymond Chen Aug 22 '20 at 15:06
  • Similar case: [Cant to move on-screen keyboard window](https://social.msdn.microsoft.com/Forums/vstudio/en-US/3764c9b2-06a6-45ce-b294-7e8cc72fba3c/cant-to-move-onscreen-keyboard-window?forum=vcgeneral)...I'm more interested in those APIs you mentioned. Maybe it's an API like elevated privileges? – Strive Sun Aug 24 '20 at 03:19

0 Answers0